uphold-wallet-account-login[.]pages[.]dev
“Uphold Wallet Login – Access & Manage Your Crypto and Digital Assets Securely”
uphold-wallet-account-login.pages.dev — Contenido no disponible. Suplantación de marca: Uphold; Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 11/94 (ADMINUSLabs, BitDefender, CyRadar, ESET, Fortinet); URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 83/100. Registrador: Cloudflare.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Analysis of uphold-wallet-account-login.pages.dev indicates a high‑risk crypto‑drainer operation that has been taken offline as of the report date. The domain was registered on March 03, 2026 and is hosted behind Cloudflare’s network (AS13335), resolving to IP address 172.66.47.103 located in the United States. The site presented a page title “Uphold Wallet Login – Access & Manage Your Crypto and Digital Assets Securely,” suggesting an attempt to impersonate the legitimate Uphold service to harvest credentials or direct users to unauthorized transactions. The site employed HTTPS with a Let’s Encrypt certificate (serial E7) and enforced HSTS, while also supporting HTTP/3, consistent with modern Cloudflare‑served sites. Its nameservers, celine.ns.cloudflare.com and yichun.ns.cloudflare.com, further confirm Cloudflare registration.
Security‑vendor telemetry shows that 11 of 94 VirusTotal scanners flagged the domain, and it appears on three independent blocklists. Additional defensive products—PhishDestroy, MetaMask, and SEAL—have explicitly blocked the URL, reinforcing the consensus that the domain is malicious. The Gridinsoft trust score of 0 / 100 underscores the poor reputation. The HTTP response code 451 indicates the content was unavailable for legal reasons, a response sometimes used by hosting providers when a domain is forcibly taken down.
While the site is currently offline, the infrastructure used (Cloudflare front‑end, a single IP address, and a generic Let’s Encrypt certificate) is reusable for future phishing or drainer campaigns. Defenders should continue to block the domain and the associated IP address, monitor for new domains that resolve to the same IP range, and enforce strict email and URL filtering for any communications referencing Uphold wallet login URLs.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Tecnologías · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100 % de confianzaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100 % de confianzaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100 % de confianzaAnálisis de VirusTotal
Evidencias archivadas
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of uphold-wallet-account-login.pages.dev · checked Mar 4, 2026
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.